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System for providing personalized service. 



FIELD OF THE INVENTION 

The invention relates to a system for providing personalized service. 

The invention further relates to an apparatus and a gatekeeper device for use in the above 

systeri. 

5 The ir vention further relates to a method for providing a personalized service. 
BACKGROUND OP THE INVENTION 

A system of the above type is widely known. For example, it is known to store user profiles in 
consumer equipment to enable personalized operation in response to the user activating his 
10 user profile, e.g. by means of an on-screen menu. Such a user profile may comprise 

information related to the user's favorite TV or radio channels and the presets they should be 
assign 2d to. It may further comprise information about preferred parameter settings such as 
sound level, picture contrast and brightness etc. 

It is foreseen that in the near future an increasing number of apparatuses will store information 
15 about personal data or preferences of users in order to adapt and/or personalize their behavior 
to a particular user. On the one hand this will lead to increased usability and efficiency. On the 
other hand user profiles have to be built up in the apparatuses involved and activated each time 
the apparatus is used. This may involve inserting a chip-card, or entering a password, which is 
inconvenient. Alternatively, the user may be recognized by automatic identification 
20 (fingerprint, face or voice recognition, transponder technology), but a disadvantage of such 
systems is that privacy is not guaranteed. 

OBJECT AND SUMMARY OF THE INVENTION 

It is an object of the invention to provide an improved system of the type defined in the 
25 opening paragraph. To that end, the system according to the invention comprises a gatekeeper 
device, capable of communicating an identity tag with at least one apparatus, the gatekeeper 
device :omprising user operable control means for controlling said communication of identity 
tags, th js acting as a gatekeeper to prevent uncontrolled use of personal information by the 
apparatus to be operated. Said gatekeeper device may be a little tool which can be carried by 
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the user, e.g, in the form of a decoration. It enables the user to build anonymous relationships 
with various apparatuses. No personal identity codes and no hiometric features need to be 
communicated, and the identity tags only have sense for one specific relationship. In response 
to the user expressing a wish to establish a relationship with an apparatus, e.g. by means of a 
5 suitafcle button on the gatekeeper device, an identity tag is generated to identify said 
relationship and stored in both the gatekeeper device and the apparatus. In a preferred 
emboiiment, the apparatus and the gatekeeper device are capable of remote, e.g. RF, 
cap active or infrared, communication. 

Said control means enable the user to specify whether the gatekeeper device should be 

10 recognized by an apparatus to be operated, and to which extent the operated apparatus should 
adapt its behavior to the user. In the most simple embodiment, the user has the choice between 
personalized behavior and no personalized behavior. For example, the gatekeeper device may 
notify the user that an apparatus is approached which is capable of personalizing its behavior, 
and w.iich already has a relationship with the gatekeeper device or which is capable of 

1 5 engag: ng in such a relationship. In a preferred embodiment the apparatus is not aware of the 
gatekeeper device until the user explicitly confirms that such a relationship may be established 
or exploited. In this way, the privacy and anonymity of the user is guaranteed. 
In a further embodiment, the gatekeeper device allows the user to specify how the operated 
apparatus and the gatekeeper device have to communicate in subsequent occasions. For 

20 example, the user may specify, that the apparatus may automatically adapt its behavior as soon 
as the gatekeeper device is recognized, or under which conditions, e.g. only in the day time, 
and not in the evening or by night Tlie user may disable said automatic recognition at each of 
said subsequent occasions, e.g. by specifying that from that moment on an explicit 
continuation by the user is required. Finally, the gatekeeper device may allow the user to 

25 terminate a relationship, causing the user profile to be removed and the identity tag be made 
invalid. A relationship may involve one specific apparatus exclusively, or it may involve 
multiple similar apparatuses, e.g. from the same manufacturer. A user profile may be stored 
with the identity tag in the gatekeeper device and transmitted each time to the apparatus to be 
operated. Alternatively, the user profile may be stored in the apparatus to be operated, waiting 

30 to be activated by the identity tag obtained from the gatekeeper device. In both cases the user 
profile may be shared with other apparatuses, e.g. by transmission through a network 
connec :ing the apparatuses, or by making the apparatuses respond to the same identity tag in 
order to obtain the user profile from the gatekeeper device. A relationship may involve 
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multi ple user profiles which are selected by the user or automatically activated in accordance 
with certain conditions, e.g. the time of the day. 



BRIEF DESCRIPTION OF THE DRAWINGS 
5 These and other aspects of the invention are apparent from and will be elucidated, by way of a 
non-limitative example* with reference to the embodiments) described hereinafter. In the 
drawings, 

Figure l shows a diagram of a system according to the invention, comprising various 
apparatuses and a gatekeeper device, 
10 Figure 2 shows an embodiment of the gatekeeper device. 

DESCRIPTION OF EMBODIMENTS 

Figure 1 shows a diagram of a system according to the invention, comprising a gatekeeper 
device 1, and various apparatuses to be operated, such as an information terminal 2, a coffee 

15 machine 3 and an audio system 4. Each one of the apparatuses 2, 3 and 4 is capable of 
adapting its behavior to a specific user in response to information obtained from the 
gatekeeper device 1. For example, the information terminal 2 tailors the information it 
provides to the knowledge and background of the user. Hie coffee machine 3 knows the user's 
caste and suggests this as a default choice, The audio systems compiles CD-tracks and adjusts 

20 the soi.nd parameters in accordance with the user's taste. The apparatuses 2, 3 and 4 

continuously transmit a RF signal indicating that they are responsive to a gatekeeper device. 
Alternatively, infrared or ultrasound signals could be used or capacitive or inductive 
techniques may be utilized. If the gatekeeper device I approaches one of the devices 2, 3 or 4, 
it detects the RF signal and notifies the user, e.g. by a flashing light, a sound beep, or a 

25 vibration. Dependent on the relationship which exists between the gatekeeper device I and the 
apparatus 2, 3 or 4, the gatekeeper device 1 may decide to send an identity tag to the apparatus 
autonomously, or leave that decision to the user. Upon receiving Che identity tag, the apparatus 
can ad* pt its behavior to the user profile associated with the identity tag. 
The gatekeeper device 1 is provided with user operable controls to allow the user to establish, 

30 terminate or alter relationships with various apparatuses, 

Figure 2 shows an embodiment of the gatekeeper device 1, referenced as the 'gatekeeper' 
henceforth. It comprises four buttons 5, 6, 7, and 8. The button 5 is used for switching the 
gatekeeper on and off. If the gatekeeper is switched off, the signals from all apparatuses are 
ignored, and no personalized behavior is exhibited. If the gatekeeper is switched on, various 
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situations may occur which will be discussed hereinafter- The buttons 6, 7 and 8 allow the user 
to make various choices with respect to the relationships with the apparatuses 2, 3, and 4. 
Button 6 has a red color and enables the user not to exploit the personalization capabilities of 
the apparatus (stay unrecognized). Button 7 has an orange color and enables the user to 
5 establish an explicit relationship with the apparatus, which means that the user has to confirm 
each time the apparatus is used. Button 7 is combined with a LED which can make the button 
stan to blink. Button 8 has a green color and enables the user to establish an implicit 
relationship with the apparatus, which means that the apparatus is allowed to adapt its 
behavior without confirmation by the user. 
1 0 The following situations may occur: 
1 ) New relationship; 

If the gatekeeper is switched on and there is no relationship yet with the apparatus to be 
operated, the orange button 7 starts blinking, indicating that the apparatus is capable of 
engaging in such a relationship. If the user does nothing, no relationship is established and the 
15 personalization capabilities of the apparatus are not exploited. Hie next time the apparatus is 
approsched, the button 7 will start blinking again. 

By pressing the red button 6, the user indicates that no relationship is desired, making the 
gatekeeper remember the apparatus and ignore the apparatus in the future, without notifying 
the us«r. 

20 By pressing the orange button 7, the user indicates that he wishes to establish an explicit 
relationship. The apparatus associates an identity tag or key to the new relationship and 
transmits it to the gatekeeper, which stores the key for future identification to the apparatus, A 
user profile is then built up by watching the user's habits in operating the apparatus. 
Altermii vely, a user profile related to a similar apparatus may be entered explicitly by the user 

25 or transferred to the apparatus, either from a memory in the gatekeeper or via a network 

connecing the apparatus with similar apparatuses. The next time the apparatus is approached, 
the use- is asked for a confirmation (by means of the blinking orange button 7). If the user 
confirms* the stored key is transmitted to the apparatus to identify the relationship and the user 
profile associated to the relationship is activated. If the user profile is stored in the gatekeeper, 

30 it is transmitted to the apparatus. 

By pressing the green button 8, the user indicates that he wishes to establish an implicit 
relationship. The same actions are performed as when pressing the orange button, thus 
establisiing a new relationship, but the next time the apparatus is approached, the user is not 
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askec for confirmation, and the user profile associated to the relationship is activated 
automatically. 

If the user pressed the red button a previous time, the gatekeeper does not notify the user if an 
apparatus is approached which is responsive to the gatekeeper. Nevertheless, the user can 
5 establish a relationship by pressing the orange or green button. Each successful action may be 
confijmed, e.g. by a beep or blinking LED. 
2) Ex elicit relationship: 

If the gatekeeper approaches an apparatus for which an explicit relationship exists, the 
gatekoeper recognizes the apparatus. This could be achieved in various ways. As described 

10 hereir before, the apparatus initially identifies itself to the gatekeeper by transmitting a signal. 
This signal could comprise an 'apparatus key 1 which also constitutes a part of said identity tags 
or kejs distributed by the apparatus to identify relationships with various gatekeeper devices. 
By comparing the apparatus key with the relationship keys stored in the gatekeeper, the 
apparatus can be recognized Additionally, a 'manufacturer key' may be contained in the 

15 appanitus key, to identify the manufacturer of the apparatus. This enables the gatekeeper to 
rccogjtize similar apparatuses from the same manufacturer and establishing relationships 
utilizing the same user profile. Alternatively, the gatekeeper explicitly relates the identity tags 
to the identity of the apparatus from which the tag was received. 

Upon recognition of the apparatus, the orange button 7 starts blinking, waiting for the user's 
20 confirmation. If the user does nothing, the personalization capabilities of the apparatus are not 
exploi ed (this time). The user may confine by pressing the button 7, thus activating the 
personalized behavior, or convert the explicit relationship into an implicit relationship by 
pressing the green button 8. The user may also terminate the explicit relationship by pressing 
the red button 6. 
25 3) Implicit relationship: 

If the gatekeeper approaches an apparatus with which an implicit relationship exists, the 
gateketsper recognizes the apparatus as described hereinbefore. No confirmation by the user is 
awaited, and the personalized behavior is activated immediately. However, the user may 
decide to convert the implicit relationship into an explicit relationship by pressing the orange 
30 button 7, or by terminating the relationship at all by pressing the red button 6. 



Although the invention has been described with reference to particular illustrative 
embod men ts, variants and modifications are possible within the scope of the inventive 
concept. 
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Thus, for example, various user profiles may be involved in one relationship, each of which 
corresponding to personal information of a different level of confidentiality. For example, 
medical data relating to the user may be incorporated in a user profile, e.g. for searching a 
library catalogue, but not in every occasion, e.g. in the presence of bystanders. 
5 The gatekeeper enables users to express different identities. People behave different at home, 
at wok or in the pub. The gatekeeper is a tool that enables users to have control over their 
expressed identities. People may possess multiple gatekeepers, each having a different look 
and suited for a different situation. Wearing two or more gatekeepers in combination may have 
the effect that the user profiles are combined in some way, 

10 Multi ?le gatekeepers may simultaneously control the behavior of one particular apparatus. Foi 
example, a message board or teleconference system which is shared by multiple users may 
allow each user to specify which personal information may be presented to the other users. For 
other parameters, such as sound level and picture brightness, the apparatus may attempt to find 
a compromise between the different values from the various user profiles. 

15 The w ord 'comprising' does not exclude the presence of other elements or steps than those 
listed in a claim. 

In summary, the invention relates to a system for providing personalized service. The system 
comprises an apparatus which is capable of personalizing its behavior in accordance with a 
user profile, and a gatekeeper device comprising control moans for allowing a user to control 

20 said personalization of the apparatus. The gatekeeper device is capable of detecting 
apparatuses which have personalization capabilities and notifying the user upon such 
detect on. The user may then decide to establish a relationship with the apparatus, which 
relationship specifies the extent of personalization which the apparatus is allowed to exhibit 
and w iether confirmation by the user is required at future occasions. The user is allowed to 

25 changu the relationship at any time. The system according to the invention enables the user to 
build iinonymous relationships with various apparatuses, providing the user with personalized 
service while privacy is guaranteed. 



CLAIMS 



7 



26.04.1999 



1. A system for providing a personalized service, comprising an apparatus which 
is capable of personalizing its behavior in accordance with a user profile, characterized fn 
that the system further comprises a gatekeeper device for controlling said personalization, said 
gatekeeper device comprising user operable control means for adjusting the extent of said 

5 personalization, 

2. A system as claimed in claim 1, characterized in that said control means 
comphse confirmation means for specifying that the apparatus is allowed to personalize its 
behavior. 

10 

3. A system as claimed in claim 1 or 2, characterized in that said control means 
comphse rejection means for specifying the apparatus is not allowed to personalize its 
behavor. 

15 4. A system as claimed in any of claims 1 to 3, characterized fn that the 

gatekeeper device is capable of detecting the nearness of the apparatus, the gatekeeper device 
further comprising notification means for notifying such a detection. 

5. A system as claimed in claim 4, characterized in that the apparatus is capable 
20 of transmitting an identification signal for facilitating said detection. 

6. A system as claimed in claim 1 , characterized in that the gatekeeper device 
comprises further user operable control means for establishing a relationship with the 
apparatus, said relationship specifying the extent of personalization at subsequent occasions. 

25 

7. A system as claimed in claim 6, characterized in that the apparatus is capable 
of generating an identity tag which identifies said relationship and exchanging said identity t\g 
with tie gatekeeper device, the gatekeeper device being capable of storing said identity tag. 
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8. A syscera as claimed in any of claims i to 7, characterized in that the 

gatekseper device is capable of storing at least one user profile, and exchanging said user 
profile with said apparatus. 

5 9. A system as claimed in any of claims 1 to 8, characterized in that the 

apparatus is capable of exchanging a user profile with said gatekeeper device or a further 
apparatus. 
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10. A gatekeeper device for use in a system as claimed in any of claims 1 to 9. 

1 L An apparatus for use in a system as claimed in any of claims 1 to 19. 

12. A method for providing a personalized service, utilizing a system as claimed in 

any or claims 1 to 9, 
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The invention relates to a system for providing personalized service. The 
systexa comprises an apparatus which is capable of personalizing its behavior in accordance 
with t user profile, and a gatekeeper device comprising control means for allowing a user to 
control said personalization of the apparatus. The gatekeeper device is capable of detecting 
5 apparatuses which have personalization capabilities and notifying the user upon such 
detection. The user may then decide to establish a relationship with the apparatus, which 
nelaticnship specifies the extent of personalization which the apparatus is allowed to exhibit 
and whether confirmation by the user is required at future occasions. The user is allowed to 
change the relationship at any time. The system according to the invention enables the user to 
10 build *monymous relationships with various apparatuses, providing the user with personalized 
services while privacy is guaranteed. 
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